Files
NexQuant/rdagent/scenarios/rl
TPTBusiness 8e00b89996 fix: Improve path traversal prevention with dedicated helper function
- Add _safe_resolve_path() helper function for path validation
- Centralizes path security logic for reuse across codebase
- Comprehensive validation: null bytes, drive letters, absolute paths, path traversal
- Uses relative_to() check to prevent path traversal attacks
- Refactor resolve_model_path() to use the new helper function

Fixes CodeQL alert #10: Uncontrolled data used in path expression

The new helper function makes the security check more explicit,
which helps CodeQL recognize the path validation.
2026-04-02 23:06:29 +02:00
..